Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
20-04-2024 18:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe
-
Size
14KB
-
MD5
9ad096f0fe422942596613f169f2c3c9
-
SHA1
4e7cfaeae8936a49edfc70b86ba36b3c1c427dbb
-
SHA256
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989
-
SHA512
0ca1c98fa46c0f703aca1fc0c88733eff68a5400215153d0b2403ecf0d8a0908c6ac481d2a3a32fec7d815ce153399bc2063fac713a8c919e9163cecb0be4273
-
SSDEEP
384:YYsbyGFOn4jMyIa0JJJJJJJJJthzDE045HMAAA:Yzbyz7yIa2A
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3164 3984 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe"C:\Users\Admin\AppData\Local\Temp\0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe"1⤵PID:3984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 2242⤵
- Program crash
PID:3164
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3984 -ip 39841⤵PID:2716